$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bd2b58a0-834f-3f49-a584-add18f708880.roa File: bd2b58a0-834f-3f49-a584-add18f708880.roa (raw, json) Hash identifier: /ENXNH5efADv6NLQvLZFKy21JuLJYb7l0Qpbu25zNCI= Subject key identifier: 00:84:14:DF:D9:D0:EC:49:88:DB:9C:5C:DD:9F:FE:9A:23:A8:FD:B0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E3A2F1416E4D77BF86EC2F900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bd2b58a0-834f-3f49-a584-add18f708880.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 834 IP address blocks: 209.101.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:14:16:e4:d7:7b:f8:6e:c2:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=b252316f-98c4-475d-b5fc-dfce1c6b7b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3d:c2:df:e7:5a:f5:9d:5b:b8:9f:df:c8:e3: fa:2e:c6:f6:d8:05:0b:8e:ae:a3:04:7e:a6:5d:22: 63:87:98:68:45:5c:c1:14:25:bb:0d:8c:39:36:29: cd:13:4a:24:84:52:ab:7f:76:08:de:19:d4:3b:4f: f4:45:8f:83:36:32:29:8a:2b:41:5d:ca:ce:67:85: 74:14:36:ac:20:7a:a0:dc:2b:16:f3:cc:64:5a:de: fa:a3:fb:58:56:e9:8f:65:4f:0f:e7:81:b1:6b:6d: d0:7c:16:e3:97:bd:e0:7f:84:b5:ad:2d:8f:5e:35: b4:30:f1:d3:3d:d3:da:7d:b9:fa:99:2a:3b:a9:7c: 14:53:c1:4f:79:60:23:c9:dc:07:ec:35:4e:43:fe: 47:45:84:7e:0d:66:70:40:79:b7:20:ee:09:13:d7: 9c:28:23:d4:ae:27:1e:41:75:4f:05:52:06:c1:16: aa:fc:52:ab:92:42:f4:b3:68:ed:1a:f8:65:3c:30: ee:55:7c:91:89:5b:13:e9:79:c8:b9:66:60:66:5a: 10:4d:46:b6:bb:c2:45:52:09:97:cd:a0:8a:38:d3: 8f:d2:2c:39:cc:f7:62:c9:ce:02:73:bf:fd:b5:f8: a9:42:47:ba:82:2d:ba:89:5f:f2:a3:cc:b8:28:fa: 38:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:84:14:DF:D9:D0:EC:49:88:DB:9C:5C:DD:9F:FE:9A:23:A8:FD:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bd2b58a0-834f-3f49-a584-add18f708880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d1:a4:3e:a8:ba:0d:d3:5c:08:33:ea:98:96:09:ea:69:27: f7:a0:52:14:52:71:4f:ad:6c:37:4d:bd:1f:58:3c:e0:aa:c0: 4f:44:ee:17:44:cd:0b:8d:44:66:13:c6:7f:27:2b:7c:0f:48: 95:25:c2:d6:7b:00:03:bb:24:61:1e:fb:46:cd:ab:d9:c9:c6: 02:c1:69:a0:3c:12:38:b6:20:5e:1c:80:db:bc:9a:84:0e:52: d7:a7:4b:cb:2d:8b:b2:a7:b6:78:49:e0:9c:e6:e6:6c:5b:3d: 12:9e:f3:81:87:27:f5:30:e9:96:e2:3d:da:aa:04:76:4b:1d: e5:c5:67:26:cb:dc:6e:f2:1a:76:2c:b8:04:9e:12:c5:63:4f: 26:ac:4b:e2:2a:bf:ef:c3:fc:7e:5e:41:cd:45:5c:01:d4:eb: bb:51:cf:d3:69:0f:9b:f1:42:b9:94:c3:40:47:4c:cd:63:65: 49:05:07:15:4f:44:ba:1a:22:d0:8a:c3:2e:f0:b4:28:f5:e8: e2:63:b1:dc:63:75:ad:ff:8a:5a:d4:83:f0:36:34:63:b7:90: 4a:fb:be:a4:f4:86:30:ad:80:02:ab:3c:8c:fd:a7:35:fb:3b: 5b:09:93:a6:97:30:36:c5:ad:93:dc:bc:cd:0b:92:86:30:f2: 3d:61:fe:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46LxQW5Nd7+G7C+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk YjI1MjMxNmYtOThjNC00NzVkLWI1ZmMtZGZjZTFjNmI3YjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j3C3+da9Z1buJ/fyOP6Lsb22AULjq6jBH6m XSJjh5hoRVzBFCW7DYw5NinNE0okhFKrf3YI3hnUO0/0RY+DNjIpiitBXcrOZ4V0 FDasIHqg3CsW88xkWt76o/tYVumPZU8P54Gxa23QfBbjl73gf4S1rS2PXjW0MPHT PdPafbn6mSo7qXwUU8FPeWAjydwH7DVOQ/5HRYR+DWZwQHm3IO4JE9ecKCPUrice QXVPBVIGwRaq/FKrkkL0s2jtGvhlPDDuVXyRiVsT6XnIuWZgZloQTUa2u8JFUgmX zaCKONOP0iw5zPdiyc4Cc7/9tfipQke6gi26iV/yo8y4KPo4cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACEFN/Z0OxJiNucXN2f/pojqP2wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmQyYjU4YTAtODM0Zi0z ZjQ5LWE1ODQtYWRkMThmNzA4ODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3RpD6oug3TXAgz6piWCeppJ/egUhRScU+tbDdNvR9YPOCqwE9E7hdE zQuNRGYTxn8nK3wPSJUlwtZ7AAO7JGEe+0bNq9nJxgLBaaA8Eji2IF4cgNu8moQO UtenS8sti7KntnhJ4Jzm5mxbPRKe84GHJ/Uw6ZbiPdqqBHZLHeXFZybL3G7yGnYs uASeEsVjTyasS+Iqv+/D/H5eQc1FXAHU67tRz9NpD5vxQrmUw0BHTM1jZUkFBxVP RLoaItCKwy7wtCj16OJjsdxjda3/ilrUg/A2NGO3kEr7vqT0hjCtgAKrPIz9pzX7 O1sJk6aXMDbFrZPcvM0LkoYw8j1h/vs= -----END CERTIFICATE-----Generated at Fri Jul 10 13:52:13 2026 by rpki-client